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creating and storing a state value for a leaf node of a balanced binary tree, wherein 
the leaves of the tree [represents] represent the complete keystream and the 
. leaf node represents the keystream segment at the location, by a preorder 
traversal of the tree from root node to the leaf node wherein a leftward tree 
branch transition comprises computing a first non-linear function and a 
rightward tree branch transition comprises computing a second non-linear 
function; 

creating and storing the keystream segment by applying a third function to the state 
value of the leaf node. 



1 2. (Not amended) A method as recited in Claim 1, further comprising the steps of 

2 creating and storing the balanced binary tree by creating and storing a stack of h 

3 elements wherein the I th element of said stack stores a state datum for the / ,th node on a 

4 path from a root node of the tree to the leaf node. 

1 3. (Not amended) A method as recited in Claim 2, wherein the step of creating 

2 and storing a state value for a leaf node comprises the steps of computing and storing 

3 a state value for the leaf node that is unique with respect to any other state value that 

4 is computed at any other time for any other leaf node of the tree. 

1 4. (Canceled.) 



1 5. (Amended) The method as recited in Claim 1, wherein each leaf node stores [n] m 

2 bits of state information, wherein [n] m_ is a multiple of [four] twelve . 
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1 6. (Amended) The method as recited in Claim 1 , further comprising the steps of: 

2 creating and storing [3n] m=3n bits of state information in each leaf node comprising 

3 a concatenation of three [n/2] n bit quantities z\ y | jc, wherein n is a multiple 

4 a of four; 

5 \ A computing the first non-linear function a and the second non-linear function b as the 

6 \ \ composition of a diffusion function d with the nonlinear " confusion" 

7 functions / and g, wherein a - f o d and b-g^d and wherein 

8 f(z\y\x) =2z\S(R(S(R(y))))\L(S(L(S(x)))) 

9 g(z\y\x) =2z+l\L(S(L(S(y))))\S(R(S(R(x)))) 

10 d(z\y\x) =z \'x+y+z \2x+y+z 

1 1 c(z\y\x) = x@y 

1 2 wherein integer addition modulo two is denoted as +, bitwise exclusive-or is denoted 

13 as © , and bitwise complementation is denoted as ; 

1 4 wherein the R denotes rotation by n/4 bits to in a direction of a least significant bit 

1 5 and L denotes rotation by n/4 bits in a direction of a most significant bit; and 

1 6 wherein a nonlinear function S comprises a lookup in a key-dependent substitution 

1 7 table. 

1 7. (Amended) The method as recited in Claim 1 , wherein the third function 

2 comprises computing a linear reduction of [n] 2n_ bits of the state value to [n/2] n bits 

3 thereof. 

1 8. (Not amended) A method as recited in Claim 6, wherein the third function 

2 comprises computing a bitwise Boolean exclusive OR of x and y. 
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1 9. (Not amended) A method as recited in Claim 6, further comprising the steps of 

2 creating and storing the substitution table S by selecting four invertible functions and 

3 storing the four invertible functions in a concatenated form. 

1 10. (Not amended) A method as recited in Claim 6, further comprising the steps of 

2 computing functions / and g in seven instructions of a central processing unit that can 

3 issue two instructions simultaneously, by using five registers to store values of x, y, z, 

4 a temporary variable, and a pointer to the substitution table S. 



(Amended) A method as recited in Claim 6, wherein the substitution table S 
comprises an array of [randomly selected] key dependent pseudorandom integer 
values. 

(Amended) A method as recited in Claim 6, wherein the substitution table S 
comprises an array of 256 [randomly selected] key dependent pseudorandom 32-bit 
unsigned integer values. 

(Amended) The method as recited in Claim 1, further comprising the steps of 
creating and storing a key for use by the first non-linear function and the second non - 
linear function, wherein the key comprises a table of [randomly selected] key 
dependent pseudorandom values. 

(Amended) The method as recited in Claim 1 , further comprising the steps of 
creating and storing, once and at a time prior to receiving the location value, a key 
for use by the first non-linear function and the second non-linear function, wherein 
the key comprises a table of [randomly selected] key dependent pseudorandom 
values. 
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(Not Amended) The method as recited in Claim 1 , further comprising the steps 
of creating and storing a key in the form of a plurality of pseudo-randomly selected 
invertible functions, wherein each of the invertible functions maps an 8 -bit portion of 
the state value to an 8-bit quantity for use as a substitute portion of the state value. 




(Amended) A method as recited in Claim 1, [wherein the substitution table S 
comprises a plurality of sub-tables, and wherein generating the substitution table 
comprises (a) setting values of the sub-tables to key-dependent permutations and (b) 
setting values of one of the sub-tables to an exclusive OR of itself to the identity 
permutation] wherein the pseudo-randomly selected invertible functions are stored in 
a plurality of substitution tables, and wherein the plurality of substitution tables are 
generated by: 

setting each of the plurality of substitution tables equal to the identity function; 

for each element of each of the plurality of substitution tables, swapping said element 
with another element of such table in a key-dependent manner, and also 
performing the same swapping operation on each table that has been 
previously been generated . 

(Amended) A method of enciphering a plaintext using at least one keystream 
segment at an arbitrary location of a complete keystream, the method comprising the 
computer-implemented steps of: 
receiving a segment of a plaintext; 

receiving a location value that identifies a location of the keystream segment within 
the complete keystream; 
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creating and storing a state value for a leaf node of a balanced binary tree, wherein 
the leaves of the tree [represents] represent the complete keystream and the 
leaf node represents the keystream segment at the location, by a preorder 
traversal of the tree from root node to the leaf node wherein a leftward tree 
branch transition comprises computing a first non-linear function and a 
rightward tree branch transition comprises computing a second non-linear 
function; 

creating and storing the keystream segment by applying a third function to the state 

value of the leaf node; 
enciphering the segment of the plaintext by combining the keystream segment with 

the segment of the plaintext using a Boolean exclusive OR operation to result 

in creating and storing a segment of ciphertext 



1 18. (Amended) A method of encrypting an ordered plurality of packets of a network 

2 communication link using at least one keystream segment at an arbitrary location of a 

3 complete keystream, the method comprising the computer-implemented steps of: 

4 receiving a packet from among the plurality of packets; 

5 determining a location value that represents a relative location of the packet among 

6 the plurality of packets; 

7 creating and storing a state value for a leaf node of a balanced binary tree, wherein 

8 the leaves of the tree [represents] represent the complete keystream and the 

9 leaf node represents a keystream segment at the relative location, by a 

1 0 preorder traversal of the tree from root node to the leaf node wherein a 

1 1 leftward tree branch transition comprises computing a first non-linear 

1 2 function and a rightward tree branch transition comprises computing a second 

1 3 non-linear function; 

1 4 creating and storing the keystream segment by applying a third function to the state 
1 5 value of the leaf node; 
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1 6 enciphering the packet by combining the keystream segment with data of the packet 

I 7 using a Boolean exclusive OR operation to result in creating and storing 
1 8 enciphered packet data. 

1 19. (Amended) A computer-readable medium carrying one or more sequences of 

2 instructions for automatically generating a keystream segment of an arbitrary 

3 location of a complete keystream of an additive stream cipher, which instructions, 

4 when executed by one or more processors, cause the one or more processors to carry 

5 out the steps of: 

6 A \ \ receiving a location value that identifies a location of the keystream segment within 

7 VV \ the complete keystream; 

8 creating and storing a state value for a leaf node of a balanced binary tree, wherein 

9 the leaves of the tree [represents] represent the complete keystream and the 
1 0 leaf node represents the keystream segment at the location, by a preorder 

I I traversal of the tree from root node to the leaf node wherein a leftward tree 

1 2 branch transition comprises computing a first non-linear function and a 

1 3 rightward tree branch transition comprises computing a second non-linear 

1 4 function; 

1 5 creating and storing the keystream segment by applying a third function to the state 

1 6 value of the leaf node. 

1 20. (Amended) An apparatus for automatically generating a keystream segment of an 

2 arbitrary location of a complete keystream of an additive stream cipher, comprising: 

3 means for receiving a location value that identifies a location of the keystream 

4 segment within the complete keystream; 
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5 means for creating and storing a state value for a leaf node of a balanced binary tree, 

6 wherein the leaves of the tree [represents] represent the complete keystream 

7 and the leaf node represents the keystream segment at the location, by a 

8 preorder traversal of the tree from root node to the leaf node wherein a 

9 leftward tree branch transition comprises computing a first non-linear 

1 0 function and a rightward tree branch transition comprises computing a second 

1 1 non-linear function; 

1 2 means for creating and storing the keystream segment by applying a third function to 

1 3 \ \ \ \ the state value of the leaf node. 

1 21 . (Amended) An apparatus for automatically generating a keystream segment of an 

2 arbitrary location of a complete keystream of an additive stream cipher, comprising: 

3 a network interface that is coupled to the data network for receiving one or more 

4 packet flows therefrom; 

5 a processor; 

6 one or more stored sequences of instructions which, when executed by the processor, 

7 cause the processor to carry out the steps of: 

8 receiving a location value that identifies a location of the keystream segment 

9 within the complete keystream; 

1 0 creating and storing a state value for a leaf node of a balanced binary tree, 

1 1 wherein the leaves of the tree [represents] represent the complete 

1 2 keystream and the leaf node represents the keystream segment at the 

1 3 location, by a preorder traversal of the tree from root node to the leaf 

1 4 node wherein a leftward tree branch transition comprises computing a 

1 5 first non-linear function and a rightward tree branch transition 

1 6 comprises computing a second non-linear function; 

1 7 creating and storing the keystream segment by applying a third function to the 

1 8 state value of the leaf node. 
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